From 2bb889e201442c1e888a7308e3bc019b9012e33d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E8=80=81=E5=91=A8=E9=83=A8=E8=90=BD?=
 <laozhoubuluo@126.com>
Date: Tue, 14 Dec 2021 21:10:47 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20=E6=95=8F=E6=84=9F?=
 =?UTF-8?q?=E7=AC=A6=E5=8F=B7=E5=81=9A=E5=AF=86=E7=A0=81=E6=97=B6=E6=97=A0?=
 =?UTF-8?q?=E6=B3=95=E7=99=BB=E5=BD=95=E7=BD=91=E7=AB=99=E7=9A=84=20Bug?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 upload/source/admincp/admincp_login.php         | 2 ++
 upload/template/default/member/login_simple.htm | 1 +
 2 files changed, 3 insertions(+)

diff --git a/upload/source/admincp/admincp_login.php b/upload/source/admincp/admincp_login.php
index f918d5ccf..90090f5ba 100644
--- a/upload/source/admincp/admincp_login.php
+++ b/upload/source/admincp/admincp_login.php
@@ -107,6 +107,7 @@ function html_login_form() {
 	$lang = lang('admincp_login');
 	$loginuser = $isguest ? '<input name="admin_username" tabindex="1" type="text" class="txt" autocomplete="off" />' : getglobal('member/username');
 	$sid = getglobal('sid');
+	$formhash = getglobal('formhash');
 	$_SERVER['QUERY_STRING'] = str_replace('&amp;', '&', dhtmlspecialchars($_SERVER['QUERY_STRING']));
 	$extra = ADMINSCRIPT.'?'.(getgpc('action') && getgpc('frames') ? 'frames=yes&' : '').$_SERVER['QUERY_STRING'];
 	$forcesecques = '<option value="0">'.($_G['config']['admincp']['forcesecques'] || $_G['group']['forcesecques'] ? $lang['forcesecques'] : $lang['security_question_0']).'</option>';
@@ -114,6 +115,7 @@ function html_login_form() {
 		<form method="post" autocomplete="off" name="login" id="loginform" action="$extra">
 		<input type="hidden" name="sid" value="$sid">
 		<input type="hidden" name="frames" value="yes">
+		<input type="hidden" name="formhash" value="$formhash">
 		<p class="logintitle">$lang[login_username]: </p>
 		<p class="loginform">$loginuser</p>
 		<p class="logintitle">$lang[login_password]:</p>
diff --git a/upload/template/default/member/login_simple.htm b/upload/template/default/member/login_simple.htm
index 83af8ef09..aff679e67 100644
--- a/upload/template/default/member/login_simple.htm
+++ b/upload/template/default/member/login_simple.htm
@@ -34,6 +34,7 @@
 					<td>&nbsp;<a href="member.php?mod={$_G[setting][regname]}" class="xi2 xw1">$_G['setting']['reglinkname']</a></td>
 				</tr>
 			</table>
+			<input type="hidden" name="formhash" value="{FORMHASH}" />
 			<input type="hidden" name="quickforward" value="yes" />
 			<input type="hidden" name="handlekey" value="ls" />
 		</div>
-- 
Gitee